High · 7.7 CVE-2025-45242 EUVD-2025-13457GHSA-4v2j-gjc9-p494

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin…

Published May 5, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php.

References

https://github.com/rhymix/rhymix
https://gist.github.com/chao112122/536a55fece5f578b90cee2c841eecdce